Exam AZ-305 topic 4 question 55 discussion

Actual exam question from Microsoft's AZ-305

Question #: 55
Topic #: 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company plans to deploy various Azure App Service instances that will use Azure SQL databases. The App Service instances will be deployed at the same time as the Azure SQL databases.
The company has a regulatory requirement to deploy the App Service instances only to specific Azure regions. The resources for the App Service instances must reside in the same region.
You need to recommend a solution to meet the regulatory requirement.
Solution: You recommend creating resource groups based on locations and implementing resource locks on the resource groups.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by lolo13698 at Oct. 13, 2022, 9:15 a.m.

Comments

Submit Cancel

NotMeAnyWay

Highly Voted 1 year, 5 months ago

Selected Answer: B

B. No While creating resource groups based on locations can help organize resources, it does not inherently limit the regions where resources can be deployed. Resource locks protect resources from accidental deletion or modification, but they do not restrict where resources can be created. For enforcing location restrictions, Azure Policy with location-based policies would be a better option. These policies can be used to ensure resources are only created in specified locations.

upvoted 7 times

...

SeMo0o0o0o

Most Recent 3 weeks ago

Selected Answer: B

B is correct You recommend using an Azure Policy initiative to enforce the location.

upvoted 1 times

...

Len83

3 months, 4 weeks ago

This question appeared in the exam, August 2024. I gave this same answer listed here. I scored 870

upvoted 1 times

...

JimmyYop

10 months, 2 weeks ago

appeared in Exam 01/2024

upvoted 2 times

...

zellck

1 year, 9 months ago

Selected Answer: B

B is the answer. https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources?tabs=json As an administrator, you can lock an Azure subscription, resource group, or resource to protect them from accidental user deletions and modifications. The lock overrides any user permissions. You can set locks that prevent either deletions or modifications. In the portal, these locks are called Delete and Read-only. In the command line, these locks are called CanNotDelete and ReadOnly. - CanNotDelete means authorized users can read and modify a resource, but they can't delete it. - ReadOnly means authorized users can read a resource, but they can't delete or update it. Applying this lock is similar to restricting all authorized users to the permissions that the Reader role provides.

upvoted 4 times

...

OPT_001122

1 year, 10 months ago

Selected Answer: B

Azure Policy is the correct ans

upvoted 1 times

...

lolo13698

2 years, 1 month ago

Selected Answer: B

Correst, it is wrong

upvoted 2 times

...